CVE-2022-50408 wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()

🗓️ 18 Sep 2025 16:03:53Reported by LinuxType

Fixed a use-after-free bug in brcmfmac_netdev_start_xmit (CVE-2022-50408).

Reporter	Title	Published	Views	Family All 124
AstraLinux	Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15	3 May 202623:59	–	astralinux
CloudLinux	kernel: Fix of 39 CVEs	20 Jan 202612:06	–	cloudlinux
CNNVD	Linux kernel 安全漏洞	18 Sep 202500:00	–	cnnvd
CVE	CVE-2022-50408	18 Sep 202516:03	–	cve
Debian CVE	CVE-2022-50408	18 Sep 202516:03	–	debiancve
Oracle linux	kernel security update	28 Jan 202600:00	–	oraclelinux
Oracle linux	kernel security update	30 Jan 202600:00	–	oraclelinux
Oracle linux	kernel security update	17 Feb 202600:00	–	oraclelinux
Oracle linux	kernel security update	4 Mar 202600:00	–	oraclelinux
Oracle linux	kernel security update	24 Mar 202600:00	–	oraclelinux

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
    ],
    "versions": [
      {
        "version": "b1a2a41126fc582a3d5613aa2d3e632b2eb1a2c4",
        "lessThan": "1613a7b24f1a7467cb727ba3ec77c9a808383560",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b1a2a41126fc582a3d5613aa2d3e632b2eb1a2c4",
        "lessThan": "d79f4d903e14dde822c60b5fd3bedc5a289d25df",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b1a2a41126fc582a3d5613aa2d3e632b2eb1a2c4",
        "lessThan": "49c742afd60f552fce7799287080db02bffe1db2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b1a2a41126fc582a3d5613aa2d3e632b2eb1a2c4",
        "lessThan": "e01d96494a9de0f48b1167f0494f6d929fa773ed",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b1a2a41126fc582a3d5613aa2d3e632b2eb1a2c4",
        "lessThan": "232d59eca07f6ea27307022a33d226aff373bd02",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b1a2a41126fc582a3d5613aa2d3e632b2eb1a2c4",
        "lessThan": "27574a3f421c3a1694d0207f37c6bbf23d66978e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b1a2a41126fc582a3d5613aa2d3e632b2eb1a2c4",
        "lessThan": "c369836cff98d3877f98c98e15c0151462812d96",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b1a2a41126fc582a3d5613aa2d3e632b2eb1a2c4",
        "lessThan": "3f42faf6db431e04bf942d2ebe3ae88975723478",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
    ],
    "versions": [
      {
        "version": "3.9",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.9",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.14.296",
        "lessThanOrEqual": "4.14.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.19.262",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.220",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.150",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.75",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.19.17",
        "lessThanOrEqual": "5.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.0.3",
        "lessThanOrEqual": "6.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/1613a7b24f1a7467cb727ba3ec77c9a808383560
git	www.git.kernel.org/stable/c/27574a3f421c3a1694d0207f37c6bbf23d66978e
git	www.git.kernel.org/stable/c/d79f4d903e14dde822c60b5fd3bedc5a289d25df
git	www.git.kernel.org/stable/c/49c742afd60f552fce7799287080db02bffe1db2
git	www.git.kernel.org/stable/c/c369836cff98d3877f98c98e15c0151462812d96
git	www.git.kernel.org/stable/c/3f42faf6db431e04bf942d2ebe3ae88975723478
git	www.git.kernel.org/stable/c/e01d96494a9de0f48b1167f0494f6d929fa773ed
git	www.git.kernel.org/stable/c/232d59eca07f6ea27307022a33d226aff373bd02

11 May 2026 19:18Current

EPSS0.0015